diff options
| author | Nikita Popov <nikita.ppv@gmail.com> | 2018-07-02 17:59:20 +0200 |
|---|---|---|
| committer | Nikita Popov <nikita.ppv@gmail.com> | 2018-07-02 17:59:33 +0200 |
| commit | 2cc6922cbfd8ff4f72e70c1d7e006d06454bb36d (patch) | |
| tree | 87b06d2fa39c4ba200de3b12a61a8eac7a9f99da | |
| parent | a57b5e82a95041cf734d87ea1e2a21a2c5148a83 (diff) | |
| parent | 3a236d0587aafc762890e61813cb22e63d8b2550 (diff) | |
| download | php-git-2cc6922cbfd8ff4f72e70c1d7e006d06454bb36d.tar.gz | |
Merge branch 'PHP-7.2'
| -rw-r--r-- | NEWS | 2 | ||||
| -rw-r--r-- | ext/standard/tests/serialize/bug70436.phpt (renamed from ext/standard/tests/strings/bug70436.phpt) | 4 |
2 files changed, 2 insertions, 4 deletions
@@ -26,7 +26,7 @@ PHP NEWS non-blocking). (Nikita) - GMP: - . Fixed bug #76470 (Integer Underflow when unserializing GMP and possible + . Fixed bug #74670 (Integer Underflow when unserializing GMP and possible other classes). (Nikita) - intl: diff --git a/ext/standard/tests/strings/bug70436.phpt b/ext/standard/tests/serialize/bug70436.phpt index 7d6d0f18d9..8b0df73d60 100644 --- a/ext/standard/tests/strings/bug70436.phpt +++ b/ext/standard/tests/serialize/bug70436.phpt @@ -25,7 +25,7 @@ $fakezval .= "\x01"; $fakezval .= "\x00"; $fakezval .= "\x00\x00"; -$inner = 'C:3:"obj":3:{ryat'; +$inner = 'C:3:"obj":3:{rya}'; $exploit = 'a:4:{i:0;i:1;i:1;C:3:"obj":'.strlen($inner).':{'.$inner.'}i:2;s:'.strlen($fakezval).':"'.$fakezval.'";i:3;R:5;}'; $data = unserialize($exploit); @@ -48,8 +48,6 @@ DONE --EXPECTF-- Notice: unserialize(): Error at offset 0 of 3 bytes in %sbug70436.php on line %d -Notice: unserialize(): Error at offset 16 of 17 bytes in %sbug70436.php on line %d - Notice: unserialize(): Error at offset 93 of 94 bytes in %sbug70436.php on line %d bool(false) DONE |